In short
Coinbase says its support agents will never ask for your password, 2-step verification code or seed phrase, ask you to move or secure your funds, or ask you to install software or remotely access your device. It also says it will never call or text you with a new seed phrase or wallet address to move funds to.
Most common fake: Calls or texts from fake Coinbase support saying your account is compromised.
Safest check: Go to coinbase.com directly by typing it, not through a link.
What Coinbase says
Coinbase says its support agents will never ask for your password, 2-step verification code or seed phrase, ask you to move or secure your funds, or ask you to install software or remotely access your device. It also says it will never call or text you with a new seed phrase or wallet address to move funds to. Source: Coinbase Help
Common fake Coinbase messages
- Calls or texts from fake Coinbase support saying your account is compromised
- Requests to move funds to a new safe wallet or seed phrase
- Requests for your password or 2-step verification code
- Instructions to install remote access software
- Spoofed caller IDs and lookalike web addresses such as misspelled Coinbase domains
Coinbase's real web addresses
Genuine Coinbase links and emails use these domains. Look at the part just before the first single slash: coinbase.com is real, but coinbase-support-center.com or coinbase.com.account-check.top are not.
- coinbase.com
- help.coinbase.com
- mail.coinbase.com
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a Coinbase message safely
- Go to coinbase.com directly by typing it, not through a link
- Contact Coinbase only through the official Contact Us page on its Help Center
- Check that emails come from an official coinbase.com address listed in Coinbase Help
- If something seems wrong, lock your account from the official site or app
How to report a fake Coinbase message
- Email security@coinbase.com with the full URL of a phishing site, full headers of a phishing email, or screenshots of a scam text. Official details on help.coinbase.com
- Forward scam text messages to 7726 (SPAM). Official details on help.coinbase.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it on the real Coinbase website or app and turn on two-step verification.
- Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
- Report the scam, then delete the message.
More help: Crypto and investment scams and what to do after a scam.
Questions people ask
Does Coinbase send messages asking for payment or personal details?
Coinbase says its support agents will never ask for your password, 2-step verification code or seed phrase, ask you to move or secure your funds, or ask you to install software or remotely access your device. It also says it will never call or text you with a new seed phrase or wallet address to move funds to.
How can I check if a Coinbase message is real?
Go to coinbase.com directly by typing it, not through a link. Contact Coinbase only through the official Contact Us page on its Help Center. Check that emails come from an official coinbase.com address listed in Coinbase Help. If something seems wrong, lock your account from the official site or app.
How do I report a fake Coinbase message?
Email security@coinbase.com with the full URL of a phishing site, full headers of a phishing email, or screenshots of a scam text. Forward scam text messages to 7726 (SPAM).
I clicked a link in a fake Coinbase message. What should I do?
Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.
- Technical support and impersonation scams (Coinbase Help)
- Reporting phishing sites (Coinbase Help)